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DETAILED ACTION 

Claims 1-18 have been examined. 

Claim Rejections - 35 USC §101 

Claims 13-18 are rejected under 35 U.S.C. 101 because the claimed invention is directed 
to non- statutory subject matter. 

The basis of this rejection is set forth in a two-prong test of: 

(1) whether the invention is within the technological arts; and 

(2) whether the invention produces a useful, concrete, and tangible result. 

For a claimed invention to be statutory, the claimed invention must be within the 
technological arts. Mere ideas in the abstract (i.e., abstract idea, law of nature, natural 
phenomena) that do not apply, involve, use, or advance the technological arts fail to promote the 
"progress of science and the useful arts" (i.e., the physical sciences as opposed to social sciences, 
for example) and therefore are found to be non-statutory subject matter. For a process claim to 
pass muster, the recited process must somehow apply, involve, use, or advance the technological 
arts. 

In the present case, claim 1 3 only recites an abstract idea. The recited steps of merely 
"defining a proposed authorization service; presenting the proposed authorization service to a 
policy management authority; receiving approval of the proposed authorization service from the 
policy management authority, whereby the proposed authorization service becomes an approved 
authorization service; and implementing the approved authorization service" does not apply, 
involve, use, or advance the technological arts since all of the recited steps can be performed in 
the mind of the user or by use of a pencil and paper. These steps only constitute an idea of how 
to authorize a service. 

Additionally, for a claimed invention to be statutory, the claimed invention must produce 
a useful, concrete, and tangible result. In the present case, the claimed invention implements an 
authorization service (i.e., repeatable) and defines an authorization service (i.e., usefUl and 
tangible). 

Although the recited process produces a useful, concrete, and tangible result, since the 
claimed invention, as a whole, is not within the technological arts as explained above, claim 13 is 
deemed to be directed to non-statutory subject matter; claims 14-18 are dependant on claim 13 
and are rejected for at least the same reasons. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1- 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over Asay et al 
(US Patent 5,903,882) in view of Sudia et al (US Patent 6,209,091). 

As per claim 1, 

Asay et al ('882) discloses in a system comprising: 

a root entity, the root entity maintaining a root certification authority adapted to 
issue a digital certificate to a first participant and a second participant, the root entity further 
maintaining a central repository; (Column 5, lines 1-27; figure 7) 

the first participant maintaining a first certification authority adapted to issue a digital 
certificate to a first customer;(Column 10, lines 27-36) 

the second participant maintaining a second certification authority adapted to issue a 
digital certificate to a second customer ? ,(Column 10, lines 45-50) 

a method for providing authorization services, comprising: 

generating by the second customer an authorization request to confirm the 
authority of an individual to act on behalf of the first customer;(Column 5, lines 14-28) 

retrieving at the first participant information concerning the authority of the individual to 
act on behalf of the first customer and one or more nues for responding to the authorization 
request,(Column 12, line 17 through column 14 line 4) 

generating by the first participant an authorization response using the retrieved 
information and rules;(Column 12, line 17 through column 14 line 4; Figure 9) 

Asay et al ('882) does not explicitly disclose "transmitting the authorization request from 

second participant to the first participant; transmitting the response from the first participant to 
the second participant; and transmitting the response from the second participant to the second 
customer.", Sudia et al ('091). discloses "transmitting the authorization request from the second 
customer to the second participant; transmitting the authorization request from the second 
participant to the first participant; transmitting the response from the first participant to the 
second participant; and transmitting the response from the second participant to the second 
customer." ( Figure 7) It would have been obvious to one having ordinary skill in the art at the 
time the invention was made to combine the Asay et al ('882) method with the Sudia et al ('091) 
method in order in order to allow the second parties transaction to be finalized. 

As per claim 2, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request is a dynamic request. (Figure 7) 

As per claim 3, 

Asay et al ('882) discloses the method of claim 1, 

Official Notice is taken that "the authorization request is a static request" is common and 
well known in prior art in reference to digital authorization. It would have been obvious to one 
having ordinary skill in the art at the time the invention was made to utilize a static request 
because is a process that can by automated, thereby saving time and user expense. 
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As per claim 5, 

Asay et al ('882) discloses the method of claim 1, 

wherein access controls are implemented that limit the ability of the second customer to 
obtain a message format for the authorization request.(Figure 10) 

As per claim 6, 

Asay et al ('882) discloses the method of claim 1, 

wherein definition information is used in preparing the authorization response.(Column 
11, lines 15-31; Figure 11) 

As per claim 7, 

Asay et al ('882) discloses the method of claim 1, 

wherein mapping information is used in preparing the authorization response.(Column 
11, lines 15-31; Figure 11) 

As per claim 8, 

Asay et al ('882) discloses the method of claim 7, 

wherein the mapping information comprises dynamic mapping information.(Figure 11) 
As per claim 9, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request seeks confirmation that the individual is authorized to 
purchase goods on behalf of the first customer.(Column 4, lines 24-27). 

As per claim 10, 

Asay et al ('882) discloses the method of claim 1, 

wherein the authorization request is bundled with a certificate validation request for the 
individual's certificate.(Figure 7) 

As per claim 1 1 , 

Asay et al ('882) discloses the method of claim 1, 

wherein the first participant checks the validity of the first customer's certifcate.(Column 
5, lines 1-28) 

As per claim 12, 

Asay et al ('882) discloses the method of claim 1, 

wherein the response indicates the status of the first customer's certificate.(Column 5, 
lines 44-51) 

As per claim 13 

Asay et al ('882) discloses a method for establishing an authorization service, 
comprising: 
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presenting the proposed authorization service to a policy management authority;(Figure 

7) 

receiving approval of the proposed authorization service from the policy management 
authority, whereby the proposed authorization service becomes an approved authorization 
service; and implementing the approved authorization service. (Figure 3) 

Asay et al ('882) does not explicitly disclose "defining a proposed authorization 
service;", Sudia et al ('091). discloses "defining a proposed authorization service".( Column 2, 
lines 25-29) It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to combine the Asay et al ('882) method with the Sudia et al ('091) method 
in order in order to promote secure commerce. 

As per claim 14, 

Asay et al ('882) discloses the method of claim 13, 

wherein the proposed authorization service comprises a messaging specification and 
implementation rules.(Column 12, lines 17-67 - column 14 line 4) 

As per claim 15, 

Asay et al ('882) discloses the method of claim 13, 

wherein the proposed authorization service is jointly developed by a customer and its 
participant.(Column 10, lines 23-36) 

As per claim 1 7, 

Asay et al ('882) discloses the method of claim 13, 

wherein the policy management authority is associated with a root entity. (Figure 7) 
As per claim 18, 

Asay et al ('882) discloses the method of claim 13, 

wherein the approved authorization service is implemented within the context of a four- 
comer model. (Figure 2) 

Allowable Subject Matter 

Claims 4 and 16 are objected to as being dependent upon a rejected base claim, but would 
be allowable if rewritten in independent form including all of the limitations of the base claim 
and any intervening claims. 

Conclusion 

Examiners note: Examiner has cited particular columns and line numbers in the 
references as applied to the claims above for the convenience of the applicant. Although the 
specified citations are representative of the teachings of the art and are applied to the specific 
limitations within the individual claim, other passages and figures may apply as well. It is 
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respectfully requested from the applicant in preparing responses, to fully consider the references 
in entirety as potentially teaching all or part of the claimed invention, as well as the context of 
the passage as taught by the prior art or disclosed by the examiner. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to John M Winter whose telephone number is (703) 305-3971 . The 
examiner can normally be reached on M-F 8:30-6, 1st Fridays off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James P Trammell can be reached on (703)305-9768. The fax phone numbers for the 
organization where this application or proceeding is assigned are (703) 305-7687 for regular 
communications and (703) 305-7687 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 308-1 113. 



JMW 

May 30, 2004 



